Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/417c1d-a2e4-44a6-af24-d4f5027600ae/1/5dJyqNwEH1rcer0A1k0_MsIE2rI.mft
File: 5dJyqNwEH1rcer0A1k0_MsIE2rI.mft (raw, json)
Hash identifier: d0ODST4ZG3bmq0KW688angwIn1A77ARZz8W2d8EH6lw=
Subject key identifier: 62:5F:3A:05:86:B4:24:16:3F:6C:4A:3B:25:02:03:50:FC:0F:92:47
Authority key identifier: E5:D2:72:A8:DC:04:1F:5A:DC:7A:BD:00:D6:4D:3F:32:C2:04:DA:B2
Certificate issuer: /CN=e5d272a8dc041f5adc7abd00d64d3f32c204dab2
Certificate serial: 019672D46DEAD31E5AEFF773FA6879EBA8C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5dJyqNwEH1rcer0A1k0_MsIE2rI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/417c1d-a2e4-44a6-af24-d4f5027600ae/1/5dJyqNwEH1rcer0A1k0_MsIE2rI.mft
Manifest number: 0BC7
Signing time: Sat 26 Apr 2025 16:00:46 +0000
Manifest this update: Sat 26 Apr 2025 16:00:46 +0000
Manifest next update: Sun 27 Apr 2025 16:00:46 +0000
Files and hashes: 1: 5dJyqNwEH1rcer0A1k0_MsIE2rI.crl (hash: 9Z8+2ZNAI5DY5s5FX5aT4uxtso37Hm9KdmLIXH1eLfg=)
2: BSxB6YJq2jQPtYNgk4RjDz0LLwo.roa (hash: 0H0jQmEDdYcS0G88hDG7z0fv29sDbdsIXn2r0lKdjdI=)
3: DOxLN4SU2YKVe0VPHjqcaGZlpe0.roa (hash: SrolEIibncQUXL/HWDj/0Ei9nEoCbSOrTFYN2mtGMDo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/417c1d-a2e4-44a6-af24-d4f5027600ae/1/5dJyqNwEH1rcer0A1k0_MsIE2rI.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/417c1d-a2e4-44a6-af24-d4f5027600ae/1/5dJyqNwEH1rcer0A1k0_MsIE2rI.mft
rsync://rpki.ripe.net/repository/DEFAULT/5dJyqNwEH1rcer0A1k0_MsIE2rI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 11:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:72:d4:6d:ea:d3:1e:5a:ef:f7:73:fa:68:79:eb:a8:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5d272a8dc041f5adc7abd00d64d3f32c204dab2
Validity
Not Before: Apr 26 16:00:46 2025 GMT
Not After : Apr 27 16:00:46 2025 GMT
Subject: CN=625f3a0586b424163f6c4a3b25020350fc0f9247
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:68:6e:f2:ac:58:d0:0e:ad:51:29:22:c2:af:
ba:3b:18:a6:8a:ac:cf:93:49:4b:52:9a:e6:4d:a6:
73:90:47:fc:50:0a:2b:73:c9:82:20:80:22:b4:95:
ba:2c:ff:f0:ea:b2:0a:04:e4:00:d8:2f:77:e8:9c:
f9:c7:30:e2:bf:c8:ec:14:f8:da:3e:4e:78:2d:2c:
d9:15:75:a9:2d:6e:90:39:c3:1b:8b:ca:32:e2:df:
d9:09:22:03:df:e5:e1:dd:8f:14:58:3b:6f:38:98:
6c:00:b7:10:cf:7a:35:f2:85:19:a4:de:6c:83:a8:
09:52:c5:61:82:19:c8:97:4b:c7:29:34:73:05:e1:
38:c4:f4:ba:7c:19:c9:79:39:38:97:fd:77:22:22:
d2:75:3a:d2:39:0f:d1:ab:5f:8b:87:ea:6d:d0:4c:
1b:9b:68:a6:87:f9:aa:a0:1b:2b:d7:c0:1c:44:54:
7d:d0:e8:31:49:bf:4c:b2:1e:c8:3d:fc:e1:58:0a:
dd:87:e6:a9:50:c6:e8:d9:95:ea:68:a9:66:05:4d:
5e:a0:b8:89:09:eb:fb:0d:39:22:b0:a6:50:4c:55:
03:b4:80:45:25:d3:3f:b0:11:b9:b5:fb:e6:96:51:
01:3a:aa:68:e2:a7:7a:7f:4a:80:19:2a:93:ed:cf:
f8:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:5F:3A:05:86:B4:24:16:3F:6C:4A:3B:25:02:03:50:FC:0F:92:47
X509v3 Authority Key Identifier:
keyid:E5:D2:72:A8:DC:04:1F:5A:DC:7A:BD:00:D6:4D:3F:32:C2:04:DA:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5dJyqNwEH1rcer0A1k0_MsIE2rI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/417c1d-a2e4-44a6-af24-d4f5027600ae/1/5dJyqNwEH1rcer0A1k0_MsIE2rI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/417c1d-a2e4-44a6-af24-d4f5027600ae/1/5dJyqNwEH1rcer0A1k0_MsIE2rI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:9c:7b:da:db:a3:e0:1c:eb:a2:8a:f3:9f:d5:ac:ae:2e:9e:
c8:d4:6a:85:96:7d:4a:51:0c:c6:aa:58:4d:ea:28:8d:5a:30:
4f:b8:dd:84:41:46:e3:ef:46:d0:b6:88:43:1a:44:56:21:d0:
2d:59:4f:b8:39:b8:53:41:c3:ca:d9:8a:77:30:57:7a:81:db:
58:1f:0d:b6:2c:2e:f1:58:4c:9b:aa:8d:36:3a:97:14:8f:be:
3f:96:9f:fe:d2:d4:0a:98:e1:18:f4:84:37:36:3b:57:55:ab:
0f:e9:9e:bf:27:bc:92:41:b3:f1:bb:b1:6e:19:fd:c3:14:12:
9f:06:02:3f:7f:3e:6b:f1:5b:27:01:ff:8e:f9:94:41:d0:e2:
67:4e:6b:d4:e4:a7:98:43:fa:8f:b1:23:4c:d1:6f:24:f9:f9:
c0:a8:eb:3d:2a:d2:27:fa:21:2b:ed:9f:44:bf:0e:cd:65:0c:
5a:3c:fa:86:38:1d:d2:3b:a2:4f:99:55:2d:31:25:8a:32:de:
f2:61:b2:1d:d2:e7:62:70:1b:7c:8b:19:60:74:6e:e5:bd:e1:
cd:d4:db:66:e1:76:44:47:8a:a9:6c:9c:e4:f7:b0:a4:28:34:
df:8b:42:d4:d8:a7:a2:06:09:50:47:21:34:f8:d0:5a:1a:ba:
82:6e:5f:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 20:26:18 2025 by rpki-client